@withwiz/toolkit 0.11.0 → 0.13.0

package/README.md

@@ -8,6 +8,7 @@ Shared utility library for [withwiz](https://github.com/greeun) projects — a c
 
 - **Composition root** — assemble every tier's configuration at once with a single `initialize()`
 - **Framework tiers** — dependencies split across three tiers: `core` / `next` / `prisma` (0.8+)
+- **API key** — framework/DB-agnostic API key core (generation with sha256-hashed storage, validation FSM, IP whitelist, plan limits, typed errors) over injectable ports, plus an x-api-key auth middleware and OpenAPI spec builder for Next.js (`next/oapi`)
 - **Auth** — JWT, password hashing, OAuth helpers (Google / GitHub / Kakao / Microsoft / Meta), state-cookie CSRF binding, Prisma adapter
 - **Cache** — Redis / in-memory / hybrid / noop backends, factory, invalidation, defaults
 - **Constants** — Error codes, messages, pagination, security constants
@@ -141,6 +142,10 @@ and the 0.7.0 / 0.8.0 entries in [`CHANGELOG.md`](CHANGELOG.md).
 
 | Subpath | Description |
 |---|---|
+| `/core/api-key` | API key core barrel (service + generator + validate + ip-whitelist + errors) |
+| `/core/api-key/api-key.service` | `ApiKeyService` — generate / validate / CRUD / regenerate over injected ports |
+| `/core/api-key/errors` | `ApiKeyError`, `API_KEY_ERROR_CODES`, `isApiKeyError` structural guard |
+| `/core/api-key/{types,ports,key-generator,ip-whitelist,validate}` | Pure types, DI ports, and helpers |
 | `/core/auth` | Full auth (JWT + password + OAuth + services + email + types) |
 | `/core/auth/jwt` | JWT sign / verify |
 | `/core/auth/password` | bcrypt helpers |
@@ -172,6 +177,7 @@ and the 0.7.0 / 0.8.0 entries in [`CHANGELOG.md`](CHANGELOG.md).
 | `/next/auth-handlers` | Route handlers (login / refresh / oauth callback / me) |
 | `/next/auth-types` | Handler types (`NextRequest` signatures) |
 | `/next/error` | `error-handler` (NextResponse), `LocaleDetector`, `ErrorBoundary` |
+| `/next/oapi` | `createApiKeyAuth` (x-api-key auth middleware), OpenAPI 3.0.3 spec builder, pagination helpers |
 | `/next/utils` | `api-helpers`, `cors`, `csv-export`, `error-processor` |
 
 ### `react` — moved to `@withwiz/ui` (0.8)

package/dist/chunk-4JZIIMAF.js

@@ -0,0 +1,33 @@
+// src/core/api-key/errors.ts
+var API_KEY_ERROR_CODES = {
+  /** 대상 API 키 미존재 */
+  NOT_FOUND: "API_KEY_NOT_FOUND",
+  /** 비소유자 접근 (admin 우회 제외) */
+  OWNERSHIP: "API_KEY_OWNERSHIP",
+  /** 제한 플랜(restrictedPlans)의 발급 시도 */
+  PLAN_RESTRICTED: "API_KEY_PLAN_RESTRICTED",
+  /** 플랜별 활성 키 한도 초과 */
+  LIMIT_REACHED: "API_KEY_LIMIT_REACHED"
+};
+var ApiKeyError = class _ApiKeyError extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ApiKeyError";
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, _ApiKeyError);
+    }
+  }
+};
+function isApiKeyError(error, code) {
+  if (!(error instanceof Error) || error.name !== "ApiKeyError" || typeof error.code !== "string") {
+    return false;
+  }
+  return code === void 0 || error.code === code;
+}
+
+export {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
+  isApiKeyError
+};

package/dist/{chunk-XQIAXMRY.js → chunk-5VZIAXO2.js}

@@ -94,7 +94,8 @@ var ERROR_CODES = {
   },
   // ============================================
   // Permissions Related (403xx - 01~09)
-  // Reserved: 40301~40303 (미사용, 향후 세분화 확장용)
+  // 40301: next/oapi api-key-auth wire 계약에서 사용 중 (IP 차단·사용량 초과) — 재배정 금지
+  // Reserved: 40302~40303 (미사용, 향후 세분화 확장용)
   // ============================================
   FORBIDDEN: {
     code: 40304,

package/dist/{chunk-MJOXTFIC.js → chunk-7Q6SMNMN.js}

@@ -1,9 +1,9 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-4Y5MRUMX.js → chunk-A6NIKJX5.js}

@@ -1,16 +1,16 @@
 import {
   AUTH_ERROR_CODE_MAP
-} from "./chunk-AYCXN6QJ.js";
+} from "./chunk-NHFIOK2D.js";
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   getErrorMessage
 } from "./chunk-7WG7XPXC.js";
 import {
   ERROR_CODES,
   classifyError
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-DISEIUYD.js → chunk-AQQ7JSS5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MTZXWVW3.js";
 import {
   OAuthManager
-} from "./chunk-UQ3Z3ZAF.js";
+} from "./chunk-V3GEYUBG.js";
 import {
   OAUTH_STATE_COOKIE,
   clearOAuthStateCookie,

package/dist/{chunk-BRFW2LL2.js → chunk-D4QADM6T.js}

@@ -1,10 +1,10 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES,
   formatErrorMessage
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logApiRequest,
   logApiResponse,

package/dist/{chunk-RWENSBNW.js → chunk-G4IGD3AZ.js}

@@ -1,6 +1,10 @@
 import {
   validateApiKeyRecord
 } from "./chunk-BTNM5YSU.js";
+import {
+  API_KEY_ERROR_CODES,
+  ApiKeyError
+} from "./chunk-4JZIIMAF.js";
 import {
   generateRawKey,
   hashKey,
@@ -42,19 +46,28 @@ var ApiKeyService = class {
   }
   async requireOwned(id, userId, isAdmin) {
     const rec = await this.deps.repo.findById(id);
-    if (!rec) throw new Error("API key not found");
-    if (!isAdmin && rec.userId !== userId) throw new Error("Unauthorized");
+    if (!rec) throw new ApiKeyError("API key not found", API_KEY_ERROR_CODES.NOT_FOUND);
+    if (!isAdmin && rec.userId !== userId) throw new ApiKeyError("Unauthorized", API_KEY_ERROR_CODES.OWNERSHIP);
     return rec;
   }
+  // FREEMIUM 등 제한 플랜은 한도(0) 의존이 아닌 명시 차단 — generate/validate 단일원천
+  assertPlanNotRestricted(plan) {
+    if (this.deps.env.restrictedPlans.includes(plan)) {
+      throw new ApiKeyError(
+        `API key is not available for the ${plan} plan. Please upgrade.`,
+        API_KEY_ERROR_CODES.PLAN_RESTRICTED
+      );
+    }
+  }
   async generateApiKey(userId, options, plan) {
     var _a, _b, _c, _d, _e, _f, _g;
     const { repo, planConfig, env } = this.deps;
-    if (env.restrictedPlans.includes(plan)) {
-      throw new Error(`API key is not available for the ${plan} plan. Please upgrade.`);
-    }
+    this.assertPlanNotRestricted(plan);
     const maxKeys = await planConfig.getApiKeyLimit(plan);
     const active = await repo.countActive(userId);
-    if (active >= maxKeys) throw new Error(`API key limit reached. Max ${maxKeys} keys.`);
+    if (active >= maxKeys) {
+      throw new ApiKeyError(`API key limit reached. Max ${maxKeys} keys.`, API_KEY_ERROR_CODES.LIMIT_REACHED);
+    }
     const rawKey = generateRawKey(this.prefix(options.environment));
     const planRate = await planConfig.getRateLimit(plan);
     const rateLimit = options.customRateLimit ? Math.min(options.customRateLimit, planRate) : planRate;
@@ -88,15 +101,17 @@ var ApiKeyService = class {
     var _a;
     const { repo, cache, env } = this.deps;
     const keyHash = hashKey(rawKey);
-    const cached = await cache.getValidation(keyHash);
+    const cached = await cache.getValidation(keyHash).catch(() => null);
     if (cached) {
       const exp = (_a = cached.apiKey) == null ? void 0 : _a.expiresAt;
       if (!(exp && new Date(exp) < /* @__PURE__ */ new Date())) return cached;
-      await cache.invalidate(keyHash);
+      await cache.invalidate(keyHash).catch(() => {
+      });
     }
     const record = await repo.findByHash(keyHash);
     const result = validateApiKeyRecord(record, { freemiumPlans: env.restrictedPlans });
-    if (result.valid) await cache.setValidation(keyHash, result);
+    if (result.valid) await cache.setValidation(keyHash, result).catch(() => {
+    });
     return result;
   }
   async getApiKey(id, userId, isAdmin = false) {
@@ -138,9 +153,14 @@ var ApiKeyService = class {
   async regenerateApiKey(userId, apiKeyId, plan, options = {}) {
     var _a, _b, _c, _d, _e;
     const old = await this.requireOwned(apiKeyId, userId, false);
+    this.assertPlanNotRestricted(plan);
     if (!options.keepOldKeyActive) {
       const max = await this.deps.planConfig.getApiKeyLimit(plan);
-      if (await this.deps.repo.countActive(userId) >= max) throw new Error(`API key limit reached. Max ${max} keys.`);
+      const active = await this.deps.repo.countActive(userId);
+      const effective = old.isActive ? active - 1 : active;
+      if (effective >= max) {
+        throw new ApiKeyError(`API key limit reached. Max ${max} keys.`, API_KEY_ERROR_CODES.LIMIT_REACHED);
+      }
       await this.deps.repo.deactivate(apiKeyId);
       await this.deps.cache.invalidate(old.key);
     }

package/dist/{chunk-4TGPAUJV.js → chunk-K7OZWWIS.js}

@@ -3,14 +3,14 @@ import {
   isRedisGloballyDisabled,
   notifyRedisError,
   resetRedisGlobalState
-} from "./chunk-ZEHNCHIV.js";
+} from "./chunk-NKZPMRVF.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 import {
   __spreadValues
 } from "./chunk-N3ETBM74.js";

package/dist/{chunk-23LQJYZN.js → chunk-KAS5ILUM.js}

@@ -1,7 +1,7 @@
 import {
   ERROR_CODES,
   formatErrorMessage
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   ROLE_DEFAULTS
 } from "./chunk-7YWUKMZD.js";

package/dist/{chunk-YBVZ5UVC.js → chunk-L4WQRYMR.js}

@@ -7,12 +7,12 @@ import {
 import {
   getAuthConfig
 } from "./chunk-TQMQ5XXG.js";
+import {
+  getResolvedCacheConfig
+} from "./chunk-RHYETIUR.js";
 import {
   getCommonConfig
 } from "./chunk-PX535BHW.js";
-import {
-  getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
 
 // src/core/system/environment.ts
 import os from "os";

package/dist/{chunk-QBXNL6QU.js → chunk-LYO2HV5F.js}

@@ -1,17 +1,17 @@
 import {
   getCacheManager,
   getEffectiveCacheBackend
-} from "./chunk-NAFMJT62.js";
+} from "./chunk-TDRB5BIM.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getCacheConfig,
   getCacheTTL
-} from "./chunk-Y6CPPBJI.js";
+} from "./chunk-QVPGBTCL.js";
 import {
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 
 // src/core/cache/cache-wrapper.ts
 function getCacheBackendLabel() {

package/dist/{chunk-TRGFXIEF.js → chunk-M4ZVQFOH.js}

@@ -1,9 +1,9 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-ATAQRXTH.js → chunk-MCPPJI3T.js}

@@ -4,7 +4,7 @@ import {
   formatErrorMessage,
   getErrorCategory,
   getHttpStatus
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 
 // src/core/error/app-error.ts
 var AppError = class _AppError extends Error {

package/dist/{chunk-AYCXN6QJ.js → chunk-NHFIOK2D.js}

@@ -1,12 +1,12 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES,
   classifyError,
   formatErrorMessage,
   getHttpStatus
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-ZEHNCHIV.js → chunk-NKZPMRVF.js}

@@ -7,7 +7,7 @@ import {
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 
 // src/core/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";

package/dist/{chunk-Y6CPPBJI.js → chunk-QVPGBTCL.js}

@@ -1,7 +1,7 @@
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 
 // src/core/cache/cache-config.ts
 var getCacheConfig = {

package/dist/{chunk-2QO7YXTF.js → chunk-QVU4BHMC.js}

@@ -1,7 +1,7 @@
 import {
   cache,
   geoCache
-} from "./chunk-NAFMJT62.js";
+} from "./chunk-TDRB5BIM.js";
 
 // src/core/cache/cache-invalidation.ts
 var invalidateCache = {

package/dist/{chunk-XF3WUF3F.js → chunk-ROJJJXRL.js}

@@ -1,9 +1,9 @@
 import {
   getCacheConfig
-} from "./chunk-Y6CPPBJI.js";
+} from "./chunk-QVPGBTCL.js";
 import {
   getENV
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 
 // src/core/cache/noop-cache-manager.ts
 var NoopCacheManager = class {

package/dist/{chunk-NAFMJT62.js → chunk-TDRB5BIM.js}

@@ -1,32 +1,32 @@
 import {
   HybridCacheManager
-} from "./chunk-2GK4LDPV.js";
+} from "./chunk-Z3OLZKTN.js";
 import {
   InMemoryCacheManager
 } from "./chunk-YYTA6ERS.js";
 import {
   NoopCacheManager
-} from "./chunk-XF3WUF3F.js";
+} from "./chunk-ROJJJXRL.js";
 import {
   RedisCacheManager
-} from "./chunk-4TGPAUJV.js";
+} from "./chunk-K7OZWWIS.js";
 import {
   isRedisAvailableNow,
   isRedisGloballyDisabled
-} from "./chunk-ZEHNCHIV.js";
+} from "./chunk-NKZPMRVF.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getCacheConfig
-} from "./chunk-Y6CPPBJI.js";
+} from "./chunk-QVPGBTCL.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 import {
   isCacheConfigInitialized
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 import {
   configWarn
 } from "./chunk-6J2EJVND.js";

package/dist/{chunk-WYA763JL.js → chunk-TGEKWTFZ.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-QAIN3WNN.js";
 import {
   getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 
 // src/core/system/health-check.ts
 async function checkServiceHealth(prismaClient) {

package/dist/{chunk-HV6A6Z5R.js → chunk-UGLEAXTY.js}

@@ -1,9 +1,9 @@
+import {
+  getResolvedCacheConfig
+} from "./chunk-RHYETIUR.js";
 import {
   getCommonConfig
 } from "./chunk-PX535BHW.js";
-import {
-  getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
 
 // src/core/cache/cache-env.ts
 function _getNodeEnv() {

package/dist/{chunk-5S7M2AJL.js → chunk-W2FBLCOR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7WG7XPXC.js";
 import {
   getErrorCategory
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 
 // src/core/error/friendly-messages-v2.ts
 var categoryIcons = {

package/dist/{chunk-7IOAGJMK.js → chunk-YOIZUVRD.js}

@@ -8,13 +8,13 @@ import {
   adminMiddleware,
   authMiddleware,
   optionalAuthMiddleware
-} from "./chunk-MJOXTFIC.js";
+} from "./chunk-7Q6SMNMN.js";
 import {
   corsMiddleware
 } from "./chunk-37VGD4VX.js";
 import {
   errorHandlerMiddleware
-} from "./chunk-4Y5MRUMX.js";
+} from "./chunk-A6NIKJX5.js";
 import {
   initRequestMiddleware
 } from "./chunk-VC2E6KYQ.js";
@@ -23,7 +23,7 @@ import {
 } from "./chunk-WXOWI7BJ.js";
 import {
   rateLimitMiddleware
-} from "./chunk-TRGFXIEF.js";
+} from "./chunk-M4ZVQFOH.js";
 
 // src/next/middleware/wrappers.ts
 function withPublicApi(handler) {

package/dist/{chunk-2GK4LDPV.js → chunk-Z3OLZKTN.js}

@@ -4,13 +4,13 @@ import {
 import {
   isRedisGloballyDisabled,
   notifyRedisError
-} from "./chunk-ZEHNCHIV.js";
+} from "./chunk-NKZPMRVF.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getCacheFallbackConfig
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-UGLEAXTY.js";
 import {
   __spreadValues
 } from "./chunk-N3ETBM74.js";

package/dist/{chunk-JRORMRVN.js → chunk-ZVGEGDYF.js}

@@ -1,6 +1,6 @@
 import {
   OAuthManager
-} from "./chunk-UQ3Z3ZAF.js";
+} from "./chunk-V3GEYUBG.js";
 import {
   generateOAuthState,
   setOAuthStateCookie

package/dist/core/api-key/api-key.service.d.ts

@@ -13,6 +13,7 @@ export declare class ApiKeyService {
     private prefix;
     private toInfo;
     private requireOwned;
+    private assertPlanNotRestricted;
     generateApiKey(userId: string, options: CreateApiKeyOptions, plan: string): Promise<ApiKeyResult>;
     validateApiKey(rawKey: string): Promise<ApiKeyValidationResult>;
     getApiKey(id: string, userId: string, isAdmin?: boolean): Promise<ApiKeyInfo>;

package/dist/core/api-key/api-key.service.js

@@ -1,7 +1,8 @@
 import {
   ApiKeyService
-} from "../../chunk-RWENSBNW.js";
+} from "../../chunk-G4IGD3AZ.js";
 import "../../chunk-BTNM5YSU.js";
+import "../../chunk-4JZIIMAF.js";
 import "../../chunk-ZZTBIA57.js";
 import "../../chunk-N3ETBM74.js";
 export {

package/dist/core/api-key/errors.d.ts

@@ -0,0 +1,21 @@
+export declare const API_KEY_ERROR_CODES: {
+    /** 대상 API 키 미존재 */
+    readonly NOT_FOUND: "API_KEY_NOT_FOUND";
+    /** 비소유자 접근 (admin 우회 제외) */
+    readonly OWNERSHIP: "API_KEY_OWNERSHIP";
+    /** 제한 플랜(restrictedPlans)의 발급 시도 */
+    readonly PLAN_RESTRICTED: "API_KEY_PLAN_RESTRICTED";
+    /** 플랜별 활성 키 한도 초과 */
+    readonly LIMIT_REACHED: "API_KEY_LIMIT_REACHED";
+};
+export type ApiKeyErrorCode = (typeof API_KEY_ERROR_CODES)[keyof typeof API_KEY_ERROR_CODES];
+export declare class ApiKeyError extends Error {
+    readonly code: ApiKeyErrorCode;
+    constructor(message: string, code: ApiKeyErrorCode);
+}
+/**
+ * ApiKeyError 판별 가드. instanceof 대신 name+code 구조 검사를 사용해
+ * 패키지 중복 설치(모듈 인스턴스 분리) 환경에서도 판별이 깨지지 않는다.
+ * code를 지정하면 해당 코드까지 일치해야 true.
+ */
+export declare function isApiKeyError(error: unknown, code?: ApiKeyErrorCode): error is ApiKeyError;

package/dist/core/api-key/errors.js

@@ -0,0 +1,11 @@
+import {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
+  isApiKeyError
+} from "../../chunk-4JZIIMAF.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
+  isApiKeyError
+};

package/dist/core/api-key/index.d.ts

@@ -1,4 +1,5 @@
 export * from '@withwiz/toolkit/core/api-key/types';
+export * from '@withwiz/toolkit/core/api-key/errors';
 export * from '@withwiz/toolkit/core/api-key/ports';
 export * from '@withwiz/toolkit/core/api-key/key-generator';
 export * from '@withwiz/toolkit/core/api-key/ip-whitelist';

package/dist/core/api-key/index.js

@@ -1,10 +1,16 @@
-import "../../chunk-MXWSG6ER.js";
+import "../../chunk-KYUJ6D65.js";
+import "../../chunk-TN5ZNYR2.js";
 import {
   ApiKeyService
-} from "../../chunk-RWENSBNW.js";
+} from "../../chunk-G4IGD3AZ.js";
 import {
   validateApiKeyRecord
 } from "../../chunk-BTNM5YSU.js";
+import {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
+  isApiKeyError
+} from "../../chunk-4JZIIMAF.js";
 import {
   isIpAllowed,
   isIpInCidr
@@ -16,11 +22,13 @@ import {
 } from "../../chunk-ZZTBIA57.js";
 import "../../chunk-N3ETBM74.js";
 import "../../chunk-CWS5RPRX.js";
-import "../../chunk-TN5ZNYR2.js";
 export {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
   ApiKeyService,
   generateRawKey,
   hashKey,
+  isApiKeyError,
   isIpAllowed,
   isIpInCidr,
   keyPreview,